@chorus-aidlc/chorus 0.14.4 → 0.14.6

package/.next/standalone/public/chorus-plugin/bin/chorus-paths.sh

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+# chorus-paths.sh — single source of truth for the Claude Code plugin's
+# GLOBAL local-state layout. Sourced by chorus-api.sh and every hook that
+# touches state. NOT an executable subcommand — sourcing it defines the
+# resolved path variables in the caller's shell.
+#
+# Layout (aligned with the daemon's global ~/.chorus/ convention):
+#
+#   ~/.chorus/plugin/<cwd-slug>/<sessionId>/
+#     ├── state.json           (+ state.json.lock)
+#     ├── sessions/            <agentName>.json
+#     ├── pending/             PreToolUse:Task -> SubagentStart handoff
+#     ├── claimed/             claimed pending files, keyed by agent_id
+#     └── .mcp_headers.* / .mcp_response.*   MCP handshake temp files
+#
+# Inputs (env):
+#   CHORUS_SESSION_ID          Claude Code session id (from a hook's stdin event).
+#                              When empty, state falls back to a stable
+#                              "<slug>/no-session" bucket so resolution NEVER fails.
+#   CLAUDE_PROJECT_DIR         Project dir; defaults to $PWD.
+#   CHORUS_PLUGIN_STATE_ROOT   Optional override of the global root (used by tests
+#                              to point at a throwaway directory).
+#
+# Outputs (vars set in the caller's shell):
+#   CHORUS_PLUGIN_ROOT         The global root (default ~/.chorus/plugin).
+#   CHORUS_CWD_SLUG            Readable slug for the project dir.
+#   CHORUS_STATE_DIR           The resolved per-session state directory.
+#
+# Design constraints:
+#   - Pure variable assignment + function definitions. Runs no external command
+#     that can make the *sourcing* shell exit non-zero (the slug helper is only
+#     invoked to compute CHORUS_CWD_SLUG, and `sed` on a here-string cannot fail
+#     the caller under `set -e` in the way a pipeline might — we keep it simple).
+#   - Bash 3.2 compatible (macOS /bin/bash): no ${var//search/replace} global
+#     substitution, no associative arrays, no `realpath`, no `readarray`.
+#   - The resolved CHORUS_STATE_DIR is NEVER empty.
+
+# --- 1. Global root (honor test override) --------------------------------
+CHORUS_PLUGIN_ROOT="${CHORUS_PLUGIN_STATE_ROOT:-${HOME:-/tmp}/.chorus/plugin}"
+
+# --- 2. cwd -> readable slug ---------------------------------------------
+# Mirrors Claude Code's own ~/.claude/projects/<-abs-path> encoding:
+# make the path absolute, strip trailing slashes, then replace every
+# non-alphanumeric character with '-'. "/home/ubuntu/dev/ai-pm" becomes
+# "-home-ubuntu-dev-ai-pm". This is a legible directory name, not a hash.
+chorus_slug_for_dir() {
+  local _csd_dir="${1:-$PWD}"
+  # Make absolute without depending on realpath.
+  case "$_csd_dir" in
+    /*) : ;;
+    *)  _csd_dir="$PWD/$_csd_dir" ;;
+  esac
+  printf '%s' "$_csd_dir" | sed -e 's#/*$##' -e 's#[^A-Za-z0-9]#-#g'
+}
+
+CHORUS_CWD_SLUG="$(chorus_slug_for_dir "${CLAUDE_PROJECT_DIR:-$PWD}")"
+
+# --- 3. Per-session partition --------------------------------------------
+# Every Claude Code hook event carries the same top-level session_id (sub-agents
+# are distinguished by a separate agent_id), so all hooks in one session resolve
+# to the same <sessionId> dir. When no session id is available (e.g. a hook with
+# no stdin, or a manual invocation) fall back to a stable shared bucket so the
+# path is always valid and non-empty.
+_chorus_sid="${CHORUS_SESSION_ID:-}"
+if [ -z "$_chorus_sid" ]; then
+  _chorus_sid="no-session"
+fi
+
+CHORUS_STATE_DIR="${CHORUS_PLUGIN_ROOT}/${CHORUS_CWD_SLUG}/${_chorus_sid}"

package/.next/standalone/public/chorus-plugin/bin/on-post-verify-task.sh

@@ -62,6 +62,11 @@ if [ -z "$EVENT" ]; then
   exit 0
 fi
 
+# Export the CC session id so chorus-api.sh's mcp-tool calls write their handshake
+# temp files under this session's global state partition (not a no-session bucket).
+CHORUS_SESSION_ID=$(printf '%s' "$EVENT" | jq -r '.session_id // .sessionId // empty' 2>/dev/null) || true
+export CHORUS_SESSION_ID
+
 # Extract taskUuid from .tool_input
 TASK_UUID=$(printf '%s' "$EVENT" | jq -r '.tool_input.taskUuid // empty' 2>/dev/null) || true
 
@@ -315,7 +320,8 @@ ACTION REQUESTED: spawn code-reviewer for this idea — an independent, read-onl
 1. Spawn the code-reviewer in FOREGROUND, passing it ideaUuid="${idea_uuid}" and the review round number (read prior code-review verdict comments on the idea to determine it). It reviews cross-task integration, architecture/convention consistency, security, regression/performance, feature-level test coverage, and overall code soundness, then posts ONE VERDICT comment on the idea.
 2. Read its VERDICT on the idea (chorus_get_comments targetType="idea").
 3. PASS / PASS WITH NOTES -> the feature may ship.
-4. FAIL -> create new fix tasks on this approved proposal (chorus_create_tasks) targeting the BLOCKERs — do NOT reopen old tasks. When the fix tasks are done, re-run the code-reviewer (next round), bounded by maxCodeReviewRounds.
+4. FAIL -> the orchestrator invokes Quick Dev to create new tasks on the original approved proposal; never reopen completed tasks or apply untracked fixes. Group related small BLOCKERs by default and split only materially large or independently testable fixes.
+5. Re-run only after every fix task passes AC self-check, independent task review, and admin verification to done. A failed or cancelled fix stops the loop and escalates. Keep maxCodeReviewRounds authoritative.
 
 Run the code-review gateway BEFORE writing any idea-completion report — the report must not be written while a FAIL verdict is outstanding.
 CTX

package/.next/standalone/public/chorus-plugin/bin/on-pre-spawn-agent.sh

@@ -23,6 +23,11 @@ if [ ! -t 0 ]; then
   EVENT=$(cat)
 fi
 
+# Export the CC session id so the pending dir lands in this session's partition —
+# the SubagentStart hook resolves the same <sessionId> and claims from there.
+CHORUS_SESSION_ID=$(printf '%s' "$EVENT" | jq -r '.session_id // .sessionId // empty' 2>/dev/null) || true
+export CHORUS_SESSION_ID
+
 # Try to extract subagent_type and name from the tool input
 AGENT_TYPE=""
 AGENT_NAME=""
@@ -48,8 +53,11 @@ esac
 #
 # CC may internally spawn cleanup agents that bypass PreToolUse:Task —
 # SubagentStart skips those if no pending file matches.
-PENDING_DIR="${CLAUDE_PROJECT_DIR:-.}/.chorus/pending"
-mkdir -p "$PENDING_DIR"
+# Resolve the global per-session state dir (fail-soft to old layout).
+# shellcheck source=chorus-paths.sh
+[ -f "${SCRIPT_DIR}/chorus-paths.sh" ] && { . "${SCRIPT_DIR}/chorus-paths.sh" 2>/dev/null || true; }
+PENDING_DIR="${CHORUS_STATE_DIR:-${CLAUDE_PROJECT_DIR:-.}/.chorus}/pending"
+mkdir -p "$PENDING_DIR" 2>/dev/null || true
 
 # Use agent name as filename; fall back to timestamp-based unique name
 PENDING_NAME="${AGENT_NAME:-unknown-$(date +%s%N)}"

package/.next/standalone/public/chorus-plugin/bin/on-session-end.sh

@@ -1,39 +1,52 @@
 #!/usr/bin/env bash
 # on-session-end.sh — SessionEnd hook
 # Fires when Claude Code session ends.
-# Cleans up the .chorus/ directory if all sessions are closed and state is empty.
+# Removes THIS session's global state directory
+# (~/.chorus/plugin/<cwd-slug>/<sessionId>/). Because state is now partitioned
+# per session, we can delete our own directory unconditionally without racing
+# sibling concurrent sessions of the same project.
 
 set -euo pipefail
 
-STATE_DIR="${CLAUDE_PROJECT_DIR:-.}/.chorus"
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+# Read event JSON from stdin to lift the session id.
+EVENT=""
+if [ ! -t 0 ]; then
+  EVENT=$(cat)
+fi
+CHORUS_SESSION_ID=$(printf '%s' "$EVENT" | jq -r '.session_id // .sessionId // empty' 2>/dev/null) || true
+export CHORUS_SESSION_ID
+
+# Resolve this session's global state dir (fail-soft to old per-project layout).
+# shellcheck source=chorus-paths.sh
+if [ -f "${SCRIPT_DIR}/chorus-paths.sh" ]; then
+  . "${SCRIPT_DIR}/chorus-paths.sh" 2>/dev/null || true
+fi
+STATE_DIR="${CHORUS_STATE_DIR:-${CLAUDE_PROJECT_DIR:-.}/.chorus}"
 
 # Nothing to clean up
 if [ ! -d "$STATE_DIR" ]; then
   exit 0
 fi
 
-# Safety check: don't delete if there are still active session files
-SESSIONS_DIR="${STATE_DIR}/sessions"
-if [ -d "$SESSIONS_DIR" ]; then
-  REMAINING=0
-  for f in "$SESSIONS_DIR"/*.json; do
-    [ -f "$f" ] || continue
-    REMAINING=$((REMAINING + 1))
-  done
-  if [ "$REMAINING" -gt 0 ]; then
+# Guard: never delete the shared "no-session" fallback bucket — a degenerate
+# session (no session id on stdin) must not wipe state that a concurrent,
+# properly-identified session might also be using. Only self-delete when we
+# resolved a real per-session directory.
+case "${CHORUS_SESSION_ID:-}" in
+  ""|no-session)
     exit 0
-  fi
-fi
+    ;;
+esac
+
+# Remove only this session's directory. Session-scoped, so no sibling guard needed.
+rm -rf "$STATE_DIR" 2>/dev/null || true
 
-# Safety check: don't delete if state.json has meaningful content
-if [ -f "${STATE_DIR}/state.json" ]; then
-  if command -v jq &>/dev/null; then
-    KEY_COUNT=$(jq 'length' "${STATE_DIR}/state.json" 2>/dev/null) || KEY_COUNT=0
-    if [ "$KEY_COUNT" -gt 0 ]; then
-      exit 0
-    fi
-  fi
+# Best-effort: remove the now-possibly-empty <cwd-slug>/ parent. Fails (and is
+# ignored) if other concurrent sessions of this project still have directories.
+if [ -n "${CHORUS_PLUGIN_ROOT:-}" ] && [ -n "${CHORUS_CWD_SLUG:-}" ]; then
+  rmdir "${CHORUS_PLUGIN_ROOT}/${CHORUS_CWD_SLUG}" 2>/dev/null || true
 fi
 
-# All clear — remove .chorus/ directory
-rm -rf "$STATE_DIR"
+exit 0

package/.next/standalone/public/chorus-plugin/bin/on-session-start.sh

@@ -17,6 +17,12 @@ if [ ! -t 0 ]; then
   EVENT=$(cat)
 fi
 
+# Extract the Claude Code session id from the event and export it so chorus-api.sh
+# (and any sub-path we build) resolves to this session's global state partition.
+# Fail-soft: an absent id just falls back to the shared "no-session" bucket.
+CHORUS_SESSION_ID=$(printf '%s' "$EVENT" | jq -r '.session_id // .sessionId // empty' 2>/dev/null) || true
+export CHORUS_SESSION_ID
+
 # Check if Chorus environment is configured
 if [ -z "${CHORUS_URL:-}" ] || [ -z "${CHORUS_API_KEY:-}" ]; then
   "$API" hook-output \

package/.next/standalone/public/chorus-plugin/bin/on-subagent-start.sh

@@ -35,6 +35,16 @@ if [ -z "$EVENT" ]; then
   exit 0
 fi
 
+# Export the CC session id (same for every hook in this session) so state and
+# the pending/claimed/sessions dirs resolve to this session's global partition.
+CHORUS_SESSION_ID=$(printf '%s' "$EVENT" | jq -r '.session_id // .sessionId // empty' 2>/dev/null) || true
+export CHORUS_SESSION_ID
+
+# Resolve the global per-session state dir once (fail-soft to the old layout).
+# shellcheck source=chorus-paths.sh
+[ -f "${SCRIPT_DIR}/chorus-paths.sh" ] && { . "${SCRIPT_DIR}/chorus-paths.sh" 2>/dev/null || true; }
+CHORUS_STATE_DIR="${CHORUS_STATE_DIR:-${CLAUDE_PROJECT_DIR:-.}/.chorus}"
+
 # Extract agent info from event
 # Note: SubagentStart only provides agent_id and agent_type — NOT the name
 # from the Task tool call. The name is captured by on-pre-spawn-agent.sh
@@ -63,9 +73,9 @@ fi
 #
 # If no pending file exists, this is an internal/cleanup agent → skip.
 AGENT_NAME=""
-PENDING_DIR="${CLAUDE_PROJECT_DIR:-.}/.chorus/pending"
-CLAIMED_DIR="${CLAUDE_PROJECT_DIR:-.}/.chorus/claimed"
-mkdir -p "$CLAIMED_DIR"
+PENDING_DIR="${CHORUS_STATE_DIR}/pending"
+CLAIMED_DIR="${CHORUS_STATE_DIR}/claimed"
+mkdir -p "$CLAIMED_DIR" 2>/dev/null || true
 
 CLAIMED_FILE=""
 
@@ -178,8 +188,8 @@ fi
 "$API" state-set "name_for_agent_${AGENT_ID}" "$SESSION_NAME"
 
 # === Session file: minimal metadata for other hooks (TeammateIdle, SubagentStop) ===
-SESSIONS_DIR="${CLAUDE_PROJECT_DIR:-.}/.chorus/sessions"
-mkdir -p "$SESSIONS_DIR"
+SESSIONS_DIR="${CHORUS_STATE_DIR}/sessions"
+mkdir -p "$SESSIONS_DIR" 2>/dev/null || true
 
 cat > "${SESSIONS_DIR}/${SESSION_NAME}.json" <<SESSIONEOF
 {

package/.next/standalone/public/chorus-plugin/bin/on-subagent-stop.sh

@@ -29,6 +29,14 @@ if [ -z "$EVENT" ]; then
   exit 0
 fi
 
+# Export the CC session id so state-get / sessions / claimed resolve to the same
+# global partition that on-subagent-start wrote to (cross-hook lookup must match).
+CHORUS_SESSION_ID=$(printf '%s' "$EVENT" | jq -r '.session_id // .sessionId // empty' 2>/dev/null) || true
+export CHORUS_SESSION_ID
+# shellcheck source=chorus-paths.sh
+[ -f "${SCRIPT_DIR}/chorus-paths.sh" ] && { . "${SCRIPT_DIR}/chorus-paths.sh" 2>/dev/null || true; }
+CHORUS_STATE_DIR="${CHORUS_STATE_DIR:-${CLAUDE_PROJECT_DIR:-.}/.chorus}"
+
 # Extract agent ID from event
 # Note: SubagentStop only provides agent_id and agent_type — NOT the name.
 # We look up the name from state (stored by SubagentStart).
@@ -84,13 +92,13 @@ if [ -n "$AGENT_NAME" ]; then
 fi
 
 # Clean up session file
-SESSIONS_DIR="${CLAUDE_PROJECT_DIR:-.}/.chorus/sessions"
+SESSIONS_DIR="${CHORUS_STATE_DIR}/sessions"
 if [ -n "$AGENT_NAME" ] && [ -f "${SESSIONS_DIR}/${AGENT_NAME}.json" ]; then
   rm -f "${SESSIONS_DIR}/${AGENT_NAME}.json"
 fi
 
 # Clean up claimed file (written by SubagentStart)
-CLAIMED_DIR="${CLAUDE_PROJECT_DIR:-.}/.chorus/claimed"
+CLAIMED_DIR="${CHORUS_STATE_DIR}/claimed"
 if [ -n "$AGENT_ID" ] && [ -f "${CLAIMED_DIR}/${AGENT_ID}" ]; then
   rm -f "${CLAIMED_DIR}/${AGENT_ID}"
 fi

package/.next/standalone/public/chorus-plugin/bin/on-task-completed.sh

@@ -26,6 +26,12 @@ if [ -z "$EVENT" ]; then
   exit 0
 fi
 
+# Export the CC session id so chorus-api.sh's state-get resolves to the SAME
+# <sessionId> partition on-subagent-start wrote the session_<agentId> mapping to.
+# Without this the lookup would miss and TaskCompleted auto-checkout would stop.
+CHORUS_SESSION_ID=$(printf '%s' "$EVENT" | jq -r '.session_id // .sessionId // empty' 2>/dev/null) || true
+export CHORUS_SESSION_ID
+
 # Extract task info
 TASK_DESCRIPTION=$(echo "$EVENT" | jq -r '.task_description // .taskDescription // .description // empty' 2>/dev/null) || true
 TASK_SUBJECT=$(echo "$EVENT" | jq -r '.task_subject // .taskSubject // .subject // empty' 2>/dev/null) || true

package/.next/standalone/public/chorus-plugin/bin/on-teammate-idle.sh

@@ -25,6 +25,12 @@ if [ -z "$EVENT" ]; then
   exit 0
 fi
 
+# Export the CC session id so chorus-api.sh's state-get resolves to the SAME
+# <sessionId> partition on-subagent-start wrote the session_<name> mapping to.
+# Without this the lookup would miss and teammate heartbeats would silently stop.
+CHORUS_SESSION_ID=$(printf '%s' "$EVENT" | jq -r '.session_id // .sessionId // empty' 2>/dev/null) || true
+export CHORUS_SESSION_ID
+
 # Extract teammate info from event
 # TeammateIdle provides teammate_name (unlike SubagentStart/Stop which don't)
 TEAMMATE_NAME=$(echo "$EVENT" | jq -r '.teammate_name // .teammateName // empty' 2>/dev/null) || true

package/.next/standalone/public/chorus-plugin/bin/on-user-prompt.sh

@@ -9,14 +9,26 @@
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-STATE_DIR="${CLAUDE_PROJECT_DIR:-.}/.chorus"
-SESSIONS_DIR="${STATE_DIR}/sessions"
 
 # Skip entirely if Chorus is not configured
 if [ -z "${CHORUS_URL:-}" ] || [ -z "${CHORUS_API_KEY:-}" ]; then
   exit 0
 fi
 
+# Read stdin only to lift the session id (no MCP, no network — stays fast).
+EVENT=""
+if [ ! -t 0 ]; then
+  EVENT=$(cat)
+fi
+CHORUS_SESSION_ID=$(printf '%s' "$EVENT" | jq -r '.session_id // .sessionId // empty' 2>/dev/null) || true
+export CHORUS_SESSION_ID
+
+# Resolve this session's global state dir (fail-soft to the old layout).
+# shellcheck source=chorus-paths.sh
+[ -f "${SCRIPT_DIR}/chorus-paths.sh" ] && { . "${SCRIPT_DIR}/chorus-paths.sh" 2>/dev/null || true; }
+STATE_DIR="${CHORUS_STATE_DIR:-${CLAUDE_PROJECT_DIR:-.}/.chorus}"
+SESSIONS_DIR="${STATE_DIR}/sessions"
+
 # Count active session files (fast local check)
 SESSION_COUNT=0
 SESSION_NAMES=""

package/.next/standalone/public/chorus-plugin/bin/test-syntax.sh

@@ -25,7 +25,11 @@ export CHORUS_API_KEY="cho_test"
 export CLAUDE_PROJECT_DIR="/tmp/chorus-test-$$"
 mkdir -p "$CLAUDE_PROJECT_DIR"
 
-cleanup() { rm -rf "$CLAUDE_PROJECT_DIR"; }
+# Point the plugin's GLOBAL state root at a throwaway dir so this test never
+# writes into the real ~/.chorus. chorus-paths.sh honors this override.
+export CHORUS_PLUGIN_STATE_ROOT="/tmp/chorus-test-$$/global"
+
+cleanup() { rm -rf "$CLAUDE_PROJECT_DIR" "/tmp/chorus-test-$$"; }
 trap cleanup EXIT
 
 # Mock event payloads for each hook type
@@ -81,6 +85,66 @@ run_test "on-session-end.sh"     '{}'
 # --- User prompt hook ---
 run_test "on-user-prompt.sh"     '{}'
 
+# ============================================================================
+# Global-state-layout assertions (chorus-paths.sh)
+# ============================================================================
+echo ""
+echo "Global state layout:"
+
+assert_eq() {
+  # assert_eq <label> <expected> <actual>
+  if [ "$2" = "$3" ]; then
+    printf "  PASS  %s\n" "$1"
+    PASS=$((PASS + 1))
+  else
+    printf "  FAIL  %s (expected '%s', got '%s')\n" "$1" "$2" "$3"
+    FAIL=$((FAIL + 1))
+    FAILED="$FAILED assert:$1"
+  fi
+}
+
+assert_true() {
+  # assert_true <label> <condition-cmd...>
+  local _label="$1"; shift
+  if "$@"; then
+    printf "  PASS  %s\n" "$_label"
+    PASS=$((PASS + 1))
+  else
+    printf "  FAIL  %s\n" "$_label"
+    FAIL=$((FAIL + 1))
+    FAILED="$FAILED assert:$_label"
+  fi
+}
+
+# 1. chorus_slug_for_dir encodes an absolute path to a readable slug (not a hash).
+SLUG_OUT="$( . "$DIR/chorus-paths.sh" 2>/dev/null; chorus_slug_for_dir "/home/ubuntu/dev/ai-pm" )"
+assert_eq "slug encoding /home/ubuntu/dev/ai-pm" "-home-ubuntu-dev-ai-pm" "$SLUG_OUT"
+
+# 2. With a session id, CHORUS_STATE_DIR resolves under the (overridden) global
+#    root at <root>/<slug>/<sessionId> — NOT under $CLAUDE_PROJECT_DIR/.chorus.
+STATE_WITH_SID="$( export CHORUS_SESSION_ID="sess-xyz"; . "$DIR/chorus-paths.sh" 2>/dev/null; printf '%s' "$CHORUS_STATE_DIR" )"
+EXPECT_SLUG="$( . "$DIR/chorus-paths.sh" 2>/dev/null; chorus_slug_for_dir "$CLAUDE_PROJECT_DIR" )"
+assert_eq "state dir under global root/<slug>/<sessionId>" \
+  "${CHORUS_PLUGIN_STATE_ROOT}/${EXPECT_SLUG}/sess-xyz" "$STATE_WITH_SID"
+case "$STATE_WITH_SID" in
+  *"/.chorus"*) assert_true "state dir is NOT the per-project .chorus" false ;;
+  *)            assert_true "state dir is NOT the per-project .chorus" true ;;
+esac
+
+# 3. Missing session id falls back to <slug>/no-session (never empty).
+STATE_NO_SID="$( unset CHORUS_SESSION_ID; . "$DIR/chorus-paths.sh" 2>/dev/null; printf '%s' "$CHORUS_STATE_DIR" )"
+assert_eq "no session id -> <slug>/no-session" \
+  "${CHORUS_PLUGIN_STATE_ROOT}/${EXPECT_SLUG}/no-session" "$STATE_NO_SID"
+
+# 4. A hook that writes state (on-pre-spawn-agent) lands its pending file under
+#    the global root, and does NOT create a .chorus/ in the project dir.
+printf '%s' '{"session_id":"sess-place","tool_input":{"subagent_type":"general-purpose","name":"placer"}}' \
+  | "$BASH" "$DIR/on-pre-spawn-agent.sh" >/dev/null 2>&1 || true
+assert_true "pending file written under global root" \
+  test -f "${CHORUS_PLUGIN_STATE_ROOT}/${EXPECT_SLUG}/sess-place/pending/placer"
+assert_true "no .chorus/ created in project dir" \
+  test ! -d "${CLAUDE_PROJECT_DIR}/.chorus"
+
 echo ""
 echo "Results: $PASS passed, $FAIL failed"
 

package/.next/standalone/public/chorus-plugin/bin/tests/test-code-review-recovery-contract.sh

@@ -0,0 +1,75 @@
+#!/bin/bash
+set -euo pipefail
+
+ROOT=$(cd "$(dirname "$0")/../../../.." && pwd)
+
+reviewers="
+public/chorus-plugin/agents/code-reviewer.md
+plugins/chorus/skills/chorus-code-reviewer/SKILL.md
+packages/openclaw-plugin/skills/code-reviewer/SKILL.md
+packages/chorus-pi/agents/chorus-code-reviewer.md
+public/skill/code-reviewer-chorus/SKILL.md
+"
+
+lifecycle="
+public/chorus-plugin/skills/chorus/SKILL.md
+public/chorus-plugin/skills/develop/SKILL.md
+public/chorus-plugin/skills/review/SKILL.md
+public/chorus-plugin/skills/yolo/SKILL.md
+plugins/chorus/skills/chorus/SKILL.md
+plugins/chorus/skills/develop/SKILL.md
+plugins/chorus/skills/review/SKILL.md
+plugins/chorus/skills/yolo/SKILL.md
+packages/openclaw-plugin/skills/chorus/SKILL.md
+packages/openclaw-plugin/skills/develop/SKILL.md
+packages/openclaw-plugin/skills/review/SKILL.md
+packages/openclaw-plugin/skills/yolo/SKILL.md
+public/kiro-plugin/.kiro/skills/chorus-develop/SKILL.md
+public/kiro-plugin/.kiro/skills/chorus-review/SKILL.md
+public/kiro-plugin/.kiro/skills/chorus-yolo/SKILL.md
+packages/chorus-pi/skills/chorus/SKILL.md
+packages/chorus-pi/skills/develop/SKILL.md
+packages/chorus-pi/skills/review/SKILL.md
+packages/chorus-pi/skills/yolo/SKILL.md
+public/skill/chorus/SKILL.md
+public/skill/develop-chorus/SKILL.md
+public/skill/review-chorus/SKILL.md
+public/skill/yolo-chorus/SKILL.md
+"
+
+assert_terms() {
+  file=$1
+  shift
+  for term in "$@"; do
+    if ! grep -Fq "$term" "$ROOT/$file"; then
+      printf 'FAIL: %s missing contract term: %s\n' "$file" "$term" >&2
+      exit 1
+    fi
+  done
+}
+
+for file in $reviewers; do
+  assert_terms "$file" \
+    "orchestrator" "Quick Dev" "original approved proposal" \
+    "related small BLOCKERs" "independent task review" \
+    "admin verification" "failed or cancelled" "maximum review rounds"
+done
+
+for file in $lifecycle; do
+  assert_terms "$file" \
+    "quick-dev" "approved proposal" "related small BLOCKERs" \
+    "independent task review" "admin verification" \
+    "failed or cancelled"
+done
+
+for file in \
+  public/chorus-plugin/skills/yolo/SKILL.md \
+  plugins/chorus/skills/yolo/SKILL.md \
+  packages/openclaw-plugin/skills/yolo/SKILL.md \
+  public/kiro-plugin/.kiro/skills/chorus-yolo/SKILL.md \
+  packages/chorus-pi/skills/yolo/SKILL.md \
+  public/skill/yolo-chorus/SKILL.md; do
+  assert_terms "$file" "maxCodeReviewRounds"
+done
+
+printf 'Code-review recovery contract parity: PASS\n'

package/.next/standalone/public/chorus-plugin/bin/tests/test-quick-dev-verification-contract.sh

@@ -0,0 +1,47 @@
+#!/bin/bash
+set -euo pipefail
+
+ROOT=$(cd "$(dirname "$0")/../../../.." && pwd)
+
+skills="
+public/chorus-plugin/skills/quick-dev/SKILL.md
+plugins/chorus/skills/quick-dev/SKILL.md
+packages/openclaw-plugin/skills/quick-dev/SKILL.md
+public/kiro-plugin/.kiro/skills/chorus-quick-dev/SKILL.md
+packages/chorus-pi/skills/quick-dev/SKILL.md
+public/skill/quick-dev-chorus/SKILL.md
+"
+
+assert_term() {
+  file=$1
+  term=$2
+  if ! grep -Fq "$term" "$ROOT/$file"; then
+    printf 'FAIL: %s missing contract term: %s\n' "$file" "$term" >&2
+    exit 1
+  fi
+}
+
+for file in $skills; do
+  for term in \
+    'chorus_checkin().agent.permissions.task' \
+    'explicit `task:admin`' \
+    'name, persona, preset/role label, task ownership' \
+    'chorus_report_criteria_self_check' \
+    'independent task review' \
+    'unresolved BLOCKER' \
+    'chorus_admin_verify_task' \
+    'continue autonomously' \
+    'evidence-rich comment' \
+    '@mention the responsible human' \
+    'headless daemon sessions' \
+    'poll for the human response'; do
+    assert_term "$file" "$term"
+  done
+done
+
+if grep -Riq 'check admin role' $skills; then
+  printf 'FAIL: Quick Dev still authorizes by role wording\n' >&2
+  exit 1
+fi
+
+printf 'Quick Dev permission-aware verification parity: PASS\n'

package/.next/standalone/public/chorus-plugin/skills/brainstorm/SKILL.md

@@ -4,7 +4,7 @@ description: Optional divergent-then-convergent dialogue for fuzzy ideas. Invoke
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.14.3"
+  version: "0.14.6"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/chorus-plugin/skills/chorus/SKILL.md

@@ -4,7 +4,7 @@ description: Chorus AI Agent collaboration platform — overview, common tools,
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.14.3"
+  version: "0.14.6"
   category: project-management
   mcp_server: chorus
 ---
@@ -223,7 +223,7 @@ Use @mentions to notify specific users or agents. Mention syntax: `@[DisplayName
 
 | Tool | Purpose |
 |------|---------|
-| `chorus_search` | Search across tasks, ideas, proposals, documents, projects, and project groups |
+| `chorus_search` | Search compact summaries across tasks, ideas, proposals, documents, projects, and project groups; canonical UUIDs use exact lookup |
 
 **Parameters:**
 - `query`: Search query string
@@ -231,6 +231,8 @@ Use @mentions to notify specific users or agents. Mention syntax: `@[DisplayName
 - `scopeUuid`: Project group UUID (when scope=group) or project UUID (when scope=project)
 - `entityTypes`: Array of entity types to search (default: all types)
 
+Prefer `chorus_search` for discovery, including exact UUID lookup. Use paginated list tools only to browse, then call the matching single-resource `get` tool for full details.
+
 ### Notifications
 
 | Tool | Purpose |
@@ -340,7 +342,7 @@ To disable, reconfigure the plugin via `/plugin` settings or manually edit `~/.c
 }
 ```
 
-When enabled, reviewers run as read-only sub-agents and post a VERDICT comment on the proposal/task/idea. Three possible outcomes: **PASS** (no issues), **PASS WITH NOTES** (minor non-blocking notes), or **FAIL** (BLOCKERs found). Results are advisory — they do not block approval, verification, or ship; the code-review gateway in particular is behavioral (it does not change the Idea's stored status). On a code-review FAIL, fix it via the `/chorus:quick-dev` workflow: `chorus_create_tasks` with `proposalUuid` set to the current approved proposal so the fix tasks attach to it, then execute → verify and re-run the gateway. Disabling reduces token usage but removes the independent quality gate.
+When enabled, reviewers run as read-only sub-agents and post a VERDICT comment on the proposal/task/idea. Three possible outcomes: **PASS** (no issues), **PASS WITH NOTES** (minor non-blocking notes), or **FAIL** (BLOCKERs found). Results are advisory — they do not block approval, verification, or ship; the code-review gateway in particular is behavioral (it does not change the Idea's stored status). On a code-review FAIL, fix it via the `/chorus:quick-dev` workflow: `chorus_create_tasks` with `proposalUuid` set to the current approved proposal so the fix tasks attach to it. Group related small BLOCKERs into one cohesive task by default; split only materially large or independently testable fixes. Each fix task must self-check its acceptance criteria and pass independent task review plus admin verification. Re-run the gateway only after every fix task is successfully `done`; if there is a failed or cancelled fix task, stop and escalate instead. Disabling reduces token usage but removes the independent quality gate.
 
 ### 6. Enable OpenSpec Mode (Optional)
 

package/.next/standalone/public/chorus-plugin/skills/develop/SKILL.md

@@ -4,7 +4,7 @@ description: Chorus Development workflow — claim tasks, report work, manage se
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.14.3"
+  version: "0.14.6"
   category: project-management
   mcp_server: chorus
 ---
@@ -237,7 +237,7 @@ Find the most recent comment containing `VERDICT:` and act on it:
 
 If no new `VERDICT:` comment appears after the reviewer returns, it exhausted its `maxTurns` budget before posting. Respawn it ONCE with a concise-budget hint in the prompt: *"Stay within turn budget. Skip deep verification. Fetch task/proposal/comments, run only the core tests, and post your VERDICT comment within the first 12 turns."* If the second attempt still produces no VERDICT, review manually using the checklist and proceed.
 
-> **Final code-review gateway (after the Idea's LAST task is verified):** when the task you just verified is the **last** task of its idea-rooted proposal, the feature is about to ship — the PostToolUse hook injects a reminder to spawn `chorus:code-reviewer` (gated by `enableCodeReviewer`, default on). Spawn it yourself in **foreground**, passing the `ideaUuid` + round number; it reviews the Idea's **aggregate** code change across all its tasks (cross-task integration, architecture, security, regression, feature-level coverage) and posts one `VERDICT` comment on the **idea**. `PASS` / `PASS WITH NOTES` → ship; `FAIL` → fix via `/chorus:quick-dev` (`chorus_create_tasks` with `proposalUuid` set to the current approved proposal so the fix tasks attach to it — do NOT reopen the verified tasks), then re-run the gateway, bounded by `maxCodeReviewRounds`. Advisory/behavioral, like the other reviewers. Run it **before** any idea-completion report.
+> **Final code-review gateway (after the Idea's LAST task is verified):** when the task you just verified is the **last** task of its idea-rooted proposal, the feature is about to ship — the PostToolUse hook injects a reminder to spawn `chorus:code-reviewer` (gated by `enableCodeReviewer`, default on). Spawn it yourself in **foreground**, passing the `ideaUuid` + round number; it reviews the Idea's **aggregate** code change across all its tasks (cross-task integration, architecture, security, regression, feature-level coverage) and posts one `VERDICT` comment on the **idea**. `PASS` / `PASS WITH NOTES` → ship; `FAIL` → fix via `/chorus:quick-dev` (`chorus_create_tasks` with `proposalUuid` set to the current approved proposal so the fix tasks attach to it — do NOT reopen the verified tasks). Group related small BLOCKERs by default; split only materially large or independently testable fixes. Require AC self-check, independent task review, and admin verification for every fix task. Re-run aggregate review only after every fix is successfully `done`; a failed or cancelled fix stops the loop and escalates, bounded by `maxCodeReviewRounds`. Advisory/behavioral, like the other reviewers. Run it **before** any idea-completion report.
 
 ### Step 9: Handle Review Feedback
 

package/.next/standalone/public/chorus-plugin/skills/idea/SKILL.md

@@ -4,7 +4,7 @@ description: Chorus Idea workflow — claim ideas, run elaboration rounds, and p
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.14.3"
+  version: "0.14.6"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/chorus-plugin/skills/openspec-aware/SKILL.md

@@ -4,7 +4,7 @@ description: Opt-in OpenSpec-mode authoring for Chorus PM workflows in Claude Co
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.14.3"
+  version: "0.14.6"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/chorus-plugin/skills/proposal/SKILL.md

@@ -4,7 +4,7 @@ description: Chorus Proposal workflow — create proposals with document and tas
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.14.3"
+  version: "0.14.6"
   category: project-management
   mcp_server: chorus
 ---